Alan Stern
08bbab4af0
USB: handle NULL config in usb_find_alt_setting()
...
commit c9a4cb204e9eb7fa7dfbe3f7d3a674fa530aa193 upstream.
usb_find_alt_setting() takes a pointer to a struct usb_host_config as
an argument; it searches for an interface with specified interface and
alternate setting numbers in that config. However, it crashes if the
usb_host_config pointer argument is NULL.
Since this is a general-purpose routine, available for use in many
places, we want to to be more robust. This patch makes it return NULL
whenever the config argument is NULL.
Signed-off-by: Alan Stern <stern@rowland.harvard.edu>
Reported-by: syzbot+19c3aaef85a89d451eac@syzkaller.appspotmail.com
CC: <stable@vger.kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2018-10-03 17:01:50 -07:00
..
accessibility
acpi
ACPI / scan: Initialize status to ACPI_STA_DEFAULT
2018-09-15 09:42:59 +02:00
amba
ARM: amba: Don't read past the end of sysfs "driver_override" buffer
2018-05-01 15:13:08 -07:00
android
binder: add missing binder_unlock()
2018-02-28 10:18:33 +01:00
ata
ata: libahci: Correct setting of DEVSLP register
2018-09-19 22:47:14 +02:00
atm
atm: zatm: Fix potential Spectre v1
2018-07-22 14:27:36 +02:00
auxdisplay
auxdisplay: img-ascii-lcd: add missing MODULE_DESCRIPTION/AUTHOR/LICENSE
2018-02-13 12:35:55 +01:00
base
drivers/base: stop new probing during shutdown
2018-09-26 08:36:34 +02:00
bcma
block
floppy: Do not copy a kernel pointer to user memory in FDGETPRM ioctl
2018-10-03 17:01:49 -07:00
bluetooth
Bluetooth: Add a new Realtek 8723DE ID 0bda:b009
2018-10-03 17:01:42 -07:00
bus
drivers/perf: arm-ccn: don't log to dmesg in event_init
2018-08-03 07:55:19 +02:00
cdrom
cdrom: Fix info leak/OOB read in cdrom_ioctl_drive_status
2018-09-05 09:20:11 +02:00
char
tpm/tpm_i2c_infineon: switch to i2c_lock_bus(..., I2C_LOCK_SEGMENT)
2018-09-19 22:47:15 +02:00
clk
clk: clk-fixed-factor: Clear OF_POPULATED flag in case of failure
2018-09-26 08:36:31 +02:00
clocksource
clocksource/drivers/fsl_ftm_timer: Fix error return checking
2018-05-30 07:50:32 +02:00
connector
cpufreq
cpufreq: Fix new policy initialization during limits updates via sysfs
2018-06-26 08:08:08 +08:00
cpuidle
cpuidle: powernv: Fix promotion from snooze if next state disabled
2018-07-03 11:23:08 +02:00
crypto
crypto: sharah - Unregister correct algorithms for SAHARA 3
2018-09-26 08:36:34 +02:00
dax
device-dax: implement ->split() to catch invalid munmap attempts
2018-02-28 10:18:33 +01:00
dca
devfreq
PM / devfreq: Fix potential NULL pointer dereference in governor_store
2018-04-13 19:48:09 +02:00
dio
dma
dmaengine: mv_xor_v2: kill the tasklets upon exit
2018-09-26 08:36:34 +02:00
dma-buf
dma-buf: remove redundant initialization of sg_table
2018-06-06 16:44:33 +02:00
edac
EDAC: Fix memleak in module init error path
2018-10-03 17:01:48 -07:00
eisa
extcon
firewire
firewire-ohci: work around oversized DMA reads on JMicron controllers
2018-05-30 07:50:18 +02:00
firmware
efi/esrt: Only call efi_mem_reserve() for boot services memory
2018-09-26 08:36:38 +02:00
fmc
fpga
gpio
gpio: Fix wrong rounding in gpio-menz127
2018-10-03 17:01:48 -07:00
gpu
drm/sun4i: Fix releasing node when enumerating enpoints
2018-10-03 17:01:46 -07:00
hid
HID: hid-ntrig: add error handling for sysfs_create_group
2018-10-03 17:01:47 -07:00
hsi
HSI: ssi_protocol: double free in ssip_pn_xmit()
2018-03-24 11:00:12 +01:00
hv
Drivers: hv: vmbus: do not mark HV_PCIE as perf_device
2018-04-20 08:20:41 +02:00
hwmon
hwmon: (pmbus/adm1275) Accept negative page register values
2018-05-30 07:50:46 +02:00
hwspinlock
hwtracing
coresight: tpiu: Fix disabling timeouts
2018-09-26 08:36:39 +02:00
i2c
i2c: i801: fix DNV's SMBCTRL register offset
2018-09-19 22:47:10 +02:00
ide
cdrom: do not call check_disk_change() inside cdrom_open()
2018-05-30 07:50:47 +02:00
idle
idle: i7300: add PCI dependency
2018-02-25 11:05:55 +01:00
iio
iio: ad9523: Fix return value for ad952x_store()
2018-09-09 20:01:22 +02:00
infiniband
IB/core: type promotion bug in rdma_rw_init_one_mr()
2018-10-03 17:01:44 -07:00
input
input: rohm_bu21023: switch to i2c_lock_bus(..., I2C_LOCK_SEGMENT)
2018-09-26 08:36:39 +02:00
iommu
iommu/amd: make sure TLB to be flushed before IOVA freed
2018-10-03 17:01:42 -07:00
ipack
irqchip
irqchip/bcm7038-l1: Hide cpu offline callback when building for !SMP
2018-09-15 09:42:58 +02:00
isdn
isdn: Disable IIOCDBGVAR
2018-08-22 07:47:14 +02:00
leds
leds: pca955x: Correct I2C Functionality
2018-04-13 19:48:03 +02:00
lguest
lightnvm
macintosh
macintosh/via-pmu: Add missing mmio accessors
2018-09-19 22:47:13 +02:00
mailbox
mailbox: xgene-slimpro: Fix potential NULL pointer dereference
2018-09-09 20:01:19 +02:00
mcb
md
md-cluster: clear another node's suspend_area after the copy is finished
2018-10-03 17:01:43 -07:00
media
media: tm6000: add error handling for dvb_register_adapter
2018-10-03 17:01:46 -07:00
memory
memory: tegra: Apply interrupts mask per SoC
2018-08-03 07:55:24 +02:00
memstick
message
scsi: mptfusion: Add bounds check in mptctl_hp_targetinfo()
2018-05-25 16:13:06 +02:00
mfd
mfd: 88pm860x-i2c: switch to i2c_lock_bus(..., I2C_LOCK_SEGMENT)
2018-09-26 08:36:39 +02:00
misc
vmci: type promotion bug in qp_host_get_user_memory()
2018-10-03 17:01:42 -07:00
mmc
mmc: sdhci: do not try to use 3.3V signaling if not supported
2018-09-26 08:36:38 +02:00
mtd
mtdchar: fix overflows in adjustment of count
2018-09-26 08:36:37 +02:00
net
wlcore: Add missing PM call for wlcore_cmd_wait_for_event_or_timeout()
2018-10-03 17:01:47 -07:00
nfc
NFC: pn533: Fix wrong GFP flag usage
2018-08-24 13:12:32 +02:00
ntb
ntb_transport: Fix bug with max_mw_size parameter
2018-05-30 07:50:22 +02:00
nubus
nvdimm
libnvdimm: fix ars_status output length calculation
2018-09-09 20:01:25 +02:00
nvme
nvmet: reset keep alive timer in controller enable
2018-08-24 13:12:30 +02:00
nvmem
nvmem: properly handle returned value nvmem_reg_read
2018-08-03 07:55:22 +02:00
of
of: unittest: for strings, account for trailing \0 in property length field
2018-07-03 11:23:08 +02:00
oprofile
parisc
parisc/pci: Switch LBA PCI bus from Hard Fail to Soft Fail mode
2018-05-30 07:50:43 +02:00
parport
parport: sunbpp: fix error return code
2018-09-26 08:36:38 +02:00
pci
PCI: aardvark: Size bridges before resources allocation
2018-09-29 03:07:35 -07:00
pcmcia
perf
drivers/perf: arm_pmu: handle no platform_device
2018-03-22 09:17:51 +01:00
phy
phy: work around 'phys' references to usb-nop-xceiv devices
2018-01-23 19:57:07 +01:00
pinctrl
pinctrl: qcom: spmi-gpio: Fix pmic_gpio_config_get() to be compliant
2018-09-26 08:36:40 +02:00
platform
platform/x86: alienware-wmi: Correct a memory leak
2018-09-29 03:07:32 -07:00
pnp
power
power: remove possible deadlock when unregistering power_supply
2018-10-03 17:01:43 -07:00
powercap
PowerCap: Fix an error code in powercap_register_zone()
2018-04-13 19:47:56 +02:00
pps
ps3
ptp
ptp: fix missing break in switch
2018-07-25 11:24:01 +02:00
pwm
pwm: tiehrpwm: Fix disabling of output of PWMs
2018-09-09 20:01:25 +02:00
rapidio
drivers/rapidio/devices/rio_mport_cdev.c: fix resource leak in error handling path in 'rio_dma_transfer()'
2017-12-14 09:28:22 +01:00
ras
regulator
regulator: fix crash caused by null driver data
2018-10-03 17:01:49 -07:00
remoteproc
reset
rpmsg
rpmsg: smd: do not use mananged resources for endpoints and channels
2018-07-03 11:23:13 +02:00
rtc
rtc: bq4802: add error handling for devm_ioremap
2018-09-26 08:36:39 +02:00
s390
s390/qeth: reset layer2 attribute on layer switch
2018-09-26 08:36:34 +02:00
sbus
scsi
scsi: megaraid_sas: Update controller info during resume
2018-10-03 17:01:48 -07:00
sfi
sh
sn
soc
soc: qcom: wcnss_ctrl: Fix increment in NV upload
2018-05-30 07:50:47 +02:00
spi
spi: rspi: Fix interrupted DMA transfers
2018-10-03 17:01:49 -07:00
spmi
ssb
staging
staging: android: ashmem: Fix mmap size validation
2018-10-03 17:01:46 -07:00
target
scsi: target/iscsi: Make iscsit_ta_authentication() respect the output buffer size
2018-10-03 17:01:45 -07:00
tc
thermal
thermal: exynos: fix setting rising_threshold for Exynos5433
2018-08-03 07:55:23 +02:00
thunderbolt
thunderbolt: Resume control channel after hibernation image is created
2018-04-24 09:34:12 +02:00
tty
serial: cpm_uart: return immediately from console poll
2018-10-03 17:01:49 -07:00
uio
uio: potential double frees if __uio_register_device() fails
2018-09-19 22:47:13 +02:00
usb
USB: handle NULL config in usb_find_alt_setting()
2018-10-03 17:01:50 -07:00
uwb
uwb: hwa-rc: fix memory leak at probe
2018-10-03 17:01:42 -07:00
vfio
vfio: platform: Fix reset module leak in error path
2018-08-03 07:55:13 +02:00
vhost
vhost: correctly check the iova range when waking virtqueue
2018-09-15 09:42:56 +02:00
video
fbdev: Distinguish between interlaced and progressive modes
2018-09-26 08:36:32 +02:00
virt
virtio
virtio: pci-legacy: Validate queue pfn
2018-09-15 09:42:57 +02:00
vlynq
vme
w1
1wire: family module autoload fails because of upper/lower case mismatch.
2018-07-03 11:23:06 +02:00
watchdog
watchdog: sbsa: use 32-bit read for WCV
2018-05-30 07:50:34 +02:00
xen
xen/scsiback: add error handling for xenbus_printf
2018-08-24 13:12:29 +02:00
zorro
zorro: Set up z->dev.dma_mask for the DMA API
2018-05-30 07:50:44 +02:00
Kconfig
Makefile
usb: build drivers/usb/common/ when USB_SUPPORT is set
2018-02-25 11:05:45 +01:00